IAPP
CIPM · Question #279
Under the General Data Protection Regulation (GDPR), what are the obligations of a processor that engages a sub-processor?
The correct answer is D. The processor must obtain the consent of the controller and ensure the sub-processor complies. See the full explanation below for the reasoning.
Question
Under the General Data Protection Regulation (GDPR), what are the obligations of a processor that engages a sub-processor?
Options
- AThe processor must give the controller prior written notice and perform a preliminary audit of the
- BThe processor must obtain the controller's specific written authorization and provide annual reports
- CThe processor must receive a written agreement that the sub-processor will be fully liable to the
- DThe processor must obtain the consent of the controller and ensure the sub-processor complies
How the community answered
(28 responses)- A7% (2)
- B4% (1)
- C14% (4)
- D75% (21)
Community Discussion
No community discussion yet for this question.